---
layout: docs
page_title: Manage static secrets
description: >-
  Store and rotate arbitrary secrets in Vault with the Key/Value and Cubbyhole
  plugins
---

> [!IMPORTANT]  
> **Documentation Update:** Product documentation, which were located in this repository under `/website`, are now located in [`hashicorp/web-unified-docs`](https://github.com/hashicorp/web-unified-docs), colocated with all other product documentation. Contributions to this content should be done in the `web-unified-docs` repo, and not this one. Changes made to `/website` content in this repo will not be reflected on the developer.hashicorp.com website.

# Manage static secrets

@include '/why-use-vault/manage-static-secrets-small.mdx'


Use the key/value (`kv`) secrets engine to store and version arbitrary static
secrets in Vault physical storage. Or use the `cubbyhole` secrets engine to tie
an arbitrary secret to an authentication token and store it within the
configured physical storage for Vault.


<Tabs>
<Tab heading="Key concepts + Overviews" group="overviews">

- [Cubbyhole plugin overview](/vault/docs/secrets/cubbyhole)
- [Key/Value (`kv`) plugin overviews](/vault/docs/secrets/kv)

</Tab>
<Tab heading="Guides" group="guides">

- [Set up the key/value v2 plugin](/vault/docs/secrets/kv/kv-v2/setup)
- [`kv` v2 cookbook](/vault/docs/secrets/kv/kv-v2/cookbook/read-data)

</Tab>
<Tab heading="Tutorials" group="tutorials">

- [Understand static and dynamic secrets](/vault/tutorials/get-started/understand-static-dynamic-secrets)
- [Store versioned key/value secrets](/vault/tutorials/secrets-management/versioned-kv)

</Tab>
<Tab heading="References" group="reference">

- [Key/Value v2 plugin API ](/vault/api-docs/secret/kv/kv-v2)
- [`vault kv` CLI commands](/vault/docs/commands/kv)
- [Cubbyhole plugin API](/vault/api-docs/secret/cubbyhole)

</Tab>
</Tabs>
